Update default

default

@@ -11,21 +11,17 @@ server {
 	ssl_dhparam /etc/ssl/dhparams.pem;
 	ssl_session_cache shared:le_nginx_SSL:1m;
 	ssl_session_cache shared:SSL:50m;
-	ssl_session_timeout 1d;
-	ssl_session_tickets off;
+	ssl_session_timeout 4h;
+	ssl_session_tickets on;
 	ssl_protocols TLSv1.3 TLSv1.2;	
-	ssl_ecdh_curve secp384r1;
-	# ssl_early_data on;		
-	add_header Content-Security-Policy "default-src https: data: 'unsafe-inline' 'unsafe-eval'" always;
+	ssl_ecdh_curve secp384r1;	
 	add_header Strict-Transport-Security 'max-age=63072000; includeSubdomains; preload' always;
 	add_header X-Robots-Tag "noindex, nofollow" always;	
 	add_header X-Content-Type-Options "nosniff" always;	
 	add_header X-Xss-Protection "1; mode=block" always;
 	resolver localhost valid=300s;
 	ssl_buffer_size 8k;
-	ssl_stapling on;
-	ssl_stapling_verify on;
-	ssl_prefer_server_ciphers on;
+	ssl_prefer_server_ciphers off;
         ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
 	location / {
         	proxy_pass https://youtube.com;
@@ -38,8 +34,7 @@ server {
 		proxy_http_version 1.1;
         	proxy_pass http://localhost:8008/;
         	proxy_set_header Host $http_host;
-        	proxy_set_header Upgrade $http_upgrade;
-        	# proxy_set_header Early-Data $ssl_early_data;
+        	proxy_set_header Upgrade $http_upgrade;        	
 		proxy_set_header Connection "upgrade";
         }
 }